CVE-2015-1777: Medium severity redhat Rhn-client-tools vulnerability
Jan Bee of the Google Security Team reports:
The /usr/sbin/rhnregks fails to properly validate hostnames in certificates. This can result in man in the middle attacks.
Please note that this issue cannot easily be exploited to cause any significant damage to a system other then preventing registration from taking place properly which the attacker would be able to do in any event if the can man in the middle the connection.
Other sources
rhnregks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5, 6, and 7 does not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to prevent system registration via a man-in-the-middle attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1777?
CVE-2015-1777 is considered to have a low severity level as it primarily affects the verification of hostnames in certificates, which can lead to potential man-in-the-middle attacks.
How do I fix CVE-2015-1777?
To resolve CVE-2015-1777, update the Red Hat rhn-client-tools to the latest version that includes a fix for hostname validation.
Which versions are affected by CVE-2015-1777?
CVE-2015-1777 affects the Red Hat rhn-client-tools but does not affect Red Hat Enterprise Linux versions 5.0, 6.0, and 7.0 as well as Red Hat Gluster Storage version 2.1.
What kind of attacks can CVE-2015-1777 facilitate?
CVE-2015-1777 can facilitate man-in-the-middle attacks due to improper hostname validation in certificates.
Who reported CVE-2015-1777?
CVE-2015-1777 was reported by Jan Bee from the Google Security Team.